When performing a forensics analysis, what device is used to prevent the system from recording data on an evidence disk?
When examining a hard disk without a write-blocker, you should not start windows because Windows will write data to the: